This provision authorizes X to collect and use biometric information from users, conditioned on user consent, for stated purposes of safety, security, and identification.
This analysis describes what X's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes X's authority to collect biometric data, a category subject to heightened legal requirements under multiple US state laws including Illinois BIPA, Washington's biometric privacy law, and Texas's CUBI statute, as well as GDPR's special category data provisions. The adequacy of the consent mechanism and the scope of permitted use are material compliance considerations.
Interpretive note: The policy does not specify which biometric modalities are collected, how consent is obtained or revoked, or the retention period for biometric data, creating uncertainty about compliance with state-specific biometric privacy statutes.
The agreement states that X may collect biometric information upon user consent for safety, security, and identification purposes; users in states with biometric privacy statutes (such as Illinois, Texas, and Washington) may have additional rights and protections under applicable state law beyond what this policy describes.
Cross-platform context
See how other platforms handle Biometric Information Collection and similar clauses.
Compare across platforms →"Based on your consent, we may collect and use your biometric information for safety, security, and identification purposes.Excerpt from X's Privacy Policy
(1) REGULATORY LANDSCAPE: This provision directly engages the Illinois Biometric Information Privacy Act (BIPA), which requires written consent, a publicly available retention schedule, and prohibition on sale or profit from biometric data.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes X's authority to collect biometric data, a category subject to heightened legal requirements under multiple US state laws including Illinois BIPA, Washington's biometric privacy law, and Texas's CUBI statute, as well as GDPR's special category data provisions. The adequacy of the consent mechanism and the scope of permitted use are material compliance considerations.
The agreement states that X may collect biometric information upon user consent for safety, security, and identification purposes; users in states with biometric privacy statutes (such as Illinois, Texas, and Washington) may have additional rights and protections under applicable state law beyond what this policy describes.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by X.